summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Resolves: bug 244475Rich Megginson2007-09-072-4/+4
| | | | | | | | | Bug Description: crash at startup with new ldap sdk on 64-bit platform Reviewed by: nkinder (Thanks!) Fix Description: Use LBER_SOCKET as the socket type instead of int. There was also a place in ldclt where we were doing the same thing. Platforms tested: RHEL5 x86_64 Flag Day: no Doc impact: no
* Resolves: #236256Noriko Hosoi2007-09-0716-347/+573
| | | | | | | | Summary: verify-db.pl (db_verify) does not work on a little endian machine (comment #1-#4) Description: 1) introducing dbverify mode to ns-slapd. 2) providing new script dbverify to call "ns-slapd dbverify" 3) fixing verify-db.pl to call dbverify instead of db_verify from BDB
* Resolves: bug 281631Rich Megginson2007-09-073-3/+58
| | | | | | | | | | | Bug Description: Pass in schema and config LDIF files to setup Reviewed by: nhosoi (Thanks!) Fix Description: 1) Allow multi-valued parameters in .inf files and command line. These values will be represented internally as an array ref. No existing parameters allow being multi-valued (e.g. you can't use Suffix=o=foo and Suffix=o=bar) 2) Add two new .inf parameters - SchemaFile and ConfigFile. The files listed in SchemaFile will be copied into the schema subdirectory of the new instance, so they must already be named appropriately (e.g. 60foo.ldif). The files listed in ConfigFile must be LDIF files with one or more whole entries to be added to the initial dse.ldif. These could be additional suffixes/databases to create, plugin configuration, replication configuration, or anything else. Right now, if you have an LDIF file that relies on custom schema, you cannot use the InstallLdifFile directive during setup. SchemaFile allows you to do that. Platforms tested: RHEL5 Flag Day: no Doc impact: Will need to document the two additional parameters.
* Resolves: #273501Noriko Hosoi2007-09-052-76/+7
| | | | | | Summary: Replication monitor CGI seems misconfigured (comment #1) 1) get_replica: missing return value for the success case 2) support the case "shadowport" is not passed
* Resolves: bug 276741Rich Megginson2007-09-041-2/+19
| | | | | | | | | | | Bug Description: 'Operation Error' encountered during DS6.21 to DS80 cross-platform migration Reviewed by: nhosoi (Thanks!) Fix Description: For cross platform migration, we should not migrate the nsslapd-idl-switch setting, we should just use the new default value which is "new". Platforms tested: RHEL4 Flag Day: no Doc impact: no QA impact: should be covered by regular nightly and manual testing New Tests integrated into TET: none
* Resolves: 207567Nathan Kinder2007-09-042-24/+5
| | | | Summary: Corrected search scope used to find entries to sync in winsync total update protocol.
* Resolves: #260341Noriko Hosoi2007-08-301-4/+16
| | | | | Summary: Migration script references a non-existing directory (comment #22) Description: introduced ignoreOldEntries not to migrate obsolete config entries.
* Resolves: 212671Nathan Kinder2007-08-303-3/+99
| | | | Summary: Handle syncing multi-valued street attribute to AD.
* Resolves: bug 262021Rich Megginson2007-08-301-3/+3
| | | | | | | | | | | Bug Description: Migration script does not migrate nsDS5ReplicaCredentials correctly. Reviewed by: nhosoi (Thanks!) Fix Description: This was a big endian vs. little endian issue. We only use name based UUID generation with the reversible password code. This code was not doing the ntoh with the numeric values generated. I'm sure there is probably a compiler warning about this on some platform. Platforms tested: RHEL5 x86_64, Solaris 9 64-bit Flag Day: no Doc impact: no QA impact: should be covered by regular nightly and manual testing New Tests integrated into TET: none
* Resolves: bug 260341Rich Megginson2007-08-302-9/+13
| | | | | | | | | | | | | | Bug Description: Migration script references a non-existing directory Reviewed by: nhosoi (Thanks!) Fix Description: This fixes a couple of problems. 1) Use the inst_dir from the directory server as the instance dir where the ldif2db script is found. 2) The password for migratecred should be quoted before being passed to the shell, in case there are shell meta chars in there 3) If using cross platform migration, and no LDIF files were found to migrate, this will cause an error message to be printed and migration will be aborted. Platforms tested: RHEL4 i386, RHEL5 x86_64 Flag Day: no Doc impact: no QA impact: should be covered by regular nightly and manual testing New Tests integrated into TET: none
* Resolves: #260341Noriko Hosoi2007-08-291-11/+33
| | | | | Summary: Migration script references a non-existing directory (comment #5,#7) Description: 3 more fixes for the with-fhs-opt case
* Resolves: #260341Noriko Hosoi2007-08-291-2/+8
| | | | | Summary: Migration script references a non-existing directory Description: added an if clause for the with_fhs_opt case
* Resolves: 207893Nathan Kinder2007-08-272-3/+65
| | | | Summary: Check if passwords are already hashed before sync'ing with AD.
* Resolves: bug 252263Rich Megginson2007-08-231-15/+3
| | | | | | | | | Bug Description: enabling chain-on-update causes replica to act as a master Reviewed by: nkinder (Thanks!) Fix Description: This fix is only minor - we must use sym_load() to look up plugins, including the entry distribution plugin we use for chain on update. But I don't believe this was causing the problem. Chain on update does not work if you BIND as directory manager. You must bind as a regular user. It may be difficult to change this. We need to do more testing to see if, in general, proxy BIND and operations work with directory manager. The chaining backend cannot use directory manager as the proxy user. Platforms tested: RHEL5 Flag Day: no Doc impact: Yes, we need to make sure we document exactly how chain on update is to be used.
* Resolves: 243221Nathan Kinder2007-08-232-15/+78
| | | | Summary: Trim initials attribute value when sync'ing to AD.
* Resolves: 253818Nathan Kinder2007-08-222-8/+16
| | | | Summary: Support FHS opt layout for perldir and propertydir.
* Added sasl link to ldap-agent binary.Nathan Kinder2007-08-202-3/+3
|
* Resolves: 253582Nathan Kinder2007-08-203-4/+14
| | | | Summary: Check if pkgconfig is available before trying to use it.
* Resolves: #253069Noriko Hosoi2007-08-175-24/+45
| | | | | | Summary: cyclic dependency from getpwnam() in log rotation code Description: Moved getpwnam call to the startup time, store the info in slapdFrontendConfig to reuse.
* Resolves: bug 253047FedoraDirSvr110b1_20070816FedoraDirSvr110b1Rich Megginson2007-08-163-11/+11
| | | | | | | | Bug Description: Does not build on Fedora 8 Fix Description: If using the O_CREAT flag with open(), the file mode must also be given. Also, the bdb calls to use ->open() must use parentheses around the function pointer access e.g. (DB->open)(args...) instead of just DB->open(args). Platforms tested: RHEL4, Fedora 8 Flag Day: no Doc impact: no
* Resolves: bug 252190Rich Megginson2007-08-154-13/+42
| | | | | | | | | | | | | | | | | | Bug Description: 7.1 to 8.0 Migration Bug Reviewed by: nhosoi (Thanks!) Fix Description: Lots of issues 1) Instead of using Net::Domain::hostname() for the hostname to use for server identifiers, we must use the leftmost component of the FullMachineName specified by the user. One of the reasons is that hostname() and hostfqdn() can give different results such that hostname() is not the leftmost component of hostfqdn(). And we should just use whatever the user specifies. This required several changes to the mapfiles, and a change to the maptable processing, to process the perl code to eval last, so that we can use token substitutions from the inf file and from hard coded strings. 2) We need to add the global preferences stuff, during migration, in order for the console to function. We cannot rely on the migrated o=NetscapeRoot data because we have to make sure we specify the new jar files to use. In addition, we need to migrate over any customizations that the user has made to these preferences. This is handled by the new updateConsoleInfo function called during admin server migration. 3) There were several resources for messages missing. These have been added. 4) With the new perl only ds instance creation code, there will actually be data in the database even though the server is not started. This is what I believe was causing the error_removing_temp_db_files error. So now, the code will only attempt to remove plain files, not directories that could be globbed. 5) Use /opt/brand-ds for the old server root instead of /opt/pkgname. 6) The migration log should use [Migration} not [Setup] 7) migration should not report a fatal error upon success Platforms tested: RHEL4 Flag Day: no Doc impact: no QA impact: should be covered by regular nightly and manual testing New Tests integrated into TET: none
* Resolves: bug 252190Rich Megginson2007-08-152-15/+35
| | | | | | | | | | | Bug Description: 7.1 to 8.0 Migration Bug Reviewed by: nhosoi (Thanks!) Files: see diff Branch: HEAD Fix Description: Although the directory server always creates key/cert databases, the admin server does not. So, just log a message and skip if they do not exist. Also was missing some message resources for various errors. Platforms tested: RHEL4 Flag Day: no Doc impact: no
* Resolves: bug 251549FedoraDirSvr110b1_20070813Rich Megginson2007-08-136-21/+21
| | | | | | | | | | Bug Description: Change filesystem path naming from "fedora-ds" to "dirsrv" Reviewed by: nkinder (Thanks!) Fix Description: Mostly just changing the package name in configure.ac, and making sure we consistently use that in path naming (e.g. /etc/@PACKAGE_NAME@ or /etc/@PACKAGE_NAME_BASE@ for adminserver). Platforms tested: RHEL4, FC6 Flag Day: no Doc impact: Oh yes. QA impact: Any existing tests that depend on /path/brand-ds will need to change to use dirsrv. It is highly encouraged to use a macro or variable for the package name in any scripts to minimize the impact of future package name changes.
* using ldap also pulls in nss and nspr, so we have to add those - also, put ↵Rich Megginson2007-08-093-3/+4
| | | | those first in the link line, so that the build finds the dirsec versions of those components and not the mozilla/seamonkey ones in libdir
* Resolves: bug 251227Rich Megginson2007-08-091-1/+1
| | | | | Description: Update dsktune for 1.1 Updated the date.
* Resolves: bug 251227Rich Megginson2007-08-091-271/+140
| | | | | Description: update dsktune for 1.1 These are the latest Solaris patches.
* revert back to using autoconf 2.59 - 2.61 causes the -avoid-version flag to ↵Rich Megginson2007-08-099-7891/+6884
| | | | be ignored, which causes rpm packaging errors
* forgot to commit the autotool generated filesRich Megginson2007-08-0811-6886/+7894
|
* Resolves: 251262Nathan Kinder2007-08-084-88/+217
| | | | Summary: Changed ldap-agent to find location of stats file dynamically.
* The arguments to memset were in the wrong order. This code is only used on ↵Rich Megginson2007-08-081-1/+1
| | | | Windows.
* Resolves: #251090Noriko Hosoi2007-08-071-8/+29
| | | | | | Summary: ds_remove cannot remove/rename directories (Comment #2) Description: when creating inst_dir and config_dir, make sure the parent dirs (lib/<brand>-ds and etc/<brand>-ds) have the specified gid.
* Resolves: bug 251227Rich Megginson2007-08-071-5/+11
| | | | | Description: Update dsktune for 1.1 Fix Description: This is for HP-UX 11.23 IPF 64bit
* Resolves: bug 237356Rich Megginson2007-08-062-1/+26
| | | | | | Description: Move DS Admin Code into Admin Server - dsktune Fix Description: This adds the dsktune dialog to the initial list of setup dialogs. Platforms tested: RHEL4
* Resolves: #250702Noriko Hosoi2007-08-034-237/+416
| | | | Summary: not all the addresses associated with listenhost are bound to listen sockets (comment #10)
* Resolves: bug 250535Rich Megginson2007-08-029-267/+59
| | | | | | | | | | Bug Description: improve perldap script execution ability on bundled platforms Reviewed by: nkinder (Thanks!) Fix Description: Most platforms will just use perl from PATH. However, on Solaris and HP-UX, we have to use special 64 bit versions to execute perldap, since perldap is 64 bit on those platforms. Also, if bundling all of the dependent components into the single package, we need to make sure the perl library path is set correctly to find perldap. The last step will be to build our version of perldap on the bundled platforms to use rpath to point to the correct runtime library location. Platforms tested: RHEL4, HP-UX 11.23 IPF 64 bit Flag Day: no Doc impact: no
* Resolves: #250347Noriko Hosoi2007-08-013-5/+18
| | | | | Summary: rsearch - make search timeout a configurable parameter Description: Introduced a new option "-o <search time limit>"
* Resolves: #249739Noriko Hosoi2007-07-273-1/+10
| | | | Summary: Implement a script registering DS to the Configuration DS (comment#5)
* Resolves: #249722Noriko Hosoi2007-07-261-0/+1
| | | | | Summary: restart-slapd has an unreplaced token {{INST-DIR}} Description: hash key, value: INST-DIR => $inf->{slapd}->{inst_dir} is added
* Resolves: bug 249633Rich Megginson2007-07-251-1/+2
| | | | | Description: setup-ds.pl should create default org entries Fix Description: Make the default in interactive mode to be to add those entries.
* Resolves: bug 249470Rich Megginson2007-07-252-37/+4
| | | | | | | | | Bug Description: cn equality index missing by default Reviewed by: nhosoi (Thanks!) Fix Description: When creating the database instance during dse.ldif processing, we do not create the user defined indexes from the defaults for this backend. This used to work in the old setup code because that code would always add the configuration for the indexes for the new instance. The way it is supposed to work is that a new instance should just copy the default indexes for that backend. This works fine when adding an instance via LDAP but not during startup. I just added a call to have this done during startup. I also removed some obsolete indexes from the default indexes. Platforms tested: RHEL4 Flag Day: no Doc impact: no
* forgot to tell Makefile.am about removed obsolete filesRich Megginson2007-07-242-6/+0
|
* removed more obsolete filesRich Megginson2007-07-2318-970/+0
|
* move setup-ds.pl and migrate-ds.pl to sbindirFedoraDirSvr110a4_20070720FedoraDirSvr110a4Rich Megginson2007-07-202-18/+43
|
* Resolves: bug 248820Rich Megginson2007-07-191-1/+4
| | | | | | | | | Bug Description: quick install failed when login userid doesn't match install user's id Reviewed by: me Fix Description: getlogin returns the _login_ ID which is the initial login id (from utmp). We want the username of the effective user ID, so I just needed to change getLogin to do that. Platforms tested: RHEL4 Flag Day: no Doc impact: no
* Resolves: bug 248145Rich Megginson2007-07-1874-42362/+46
| | | | | | | | | Bug Description: Replace ds_newinst binary with perl script - remove dead code Reviewed by: nhosoi (Thanks!) Fix Description: This is my favorite part - removing all of the now dead code. I also had to fix the exit code so that you could use $? to test for the success or failure of the new setup scripts. Platforms tested: RHEL4, FC6 Flag Day: no Doc impact: no
* Resolves: bug 248272Rich Megginson2007-07-161-6/+7
| | | | | | Description: CLU: dbgen.pl fails to load data files Reviewed by: nhosoi (Thanks!) Fix Description: dbgen.pl is hardcoded to look for data files in ../data. Instead, we should allow the user to provide the location to the data files e.g. -l /path/to/data, and we should also use share/brand-ds/data as the default directory.
* Resolves: bug 248145Rich Megginson2007-07-134-11/+26
| | | | | | | | | | Bug Description: Replace ds_newinst binary with perl script Reviewed by: nhosoi (Thanks!) Fix Description: 1) Inf needs to be able to read the .inf file from stdin. This is what ds_newinst.pl does currently. 2) getlogin seems not to work in all cases, so add a more robust replacement. Platforms tested: RHEL4, FC6 Flag Day: no Doc impact: no
* Resolves: bug 248145Rich Megginson2007-07-1326-118/+1321
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bug Description: Replace ds_newinst binary with perl script Reviewed by: nhosoi (Thanks!) Fix Description: The time has come. We can finally get rid of the instance creation C code once and for all. I've created a DSCreate module that has all of the functionality of the old create_instance.c code, along with a few items from ldap/admin/lib. The way it works is this: it first creates the dse.ldif file using template-dse.ldif and the suffix-db template to create the initial db and suffix. It then adds additional optional configuration depending on what optional features have been enabled. It creates other config files and copies in the schema. It then initializes the database. It uses a template file based on the type of entry implied by the suffix, then adds the default ACIs. If the user chose to do so, it will also create the ou=people, ou=groups, etc. entries. The user can also supply an LDIF file which will be used to populate the initial database, in which case none of the default entries or ACIs will be used. It then starts the server (if desired). I had to create a function makePaths that works like mkdir -p except that it will chown, chgrp, and chmod all paths created. I had to change the other places where instance creation was called to use the new calling semantics. ds_create changed quite a bit, since it can just use an Inf to pass in the information instead of calling ds_newinst as a CGI program. I had to change FileConn to add support for namingContexts (i.e. entries with no parent), and to have it write each change each time, and to return copies of entries when searching, to avoid modifying the tree in place. This makes it act much more like LDAP. I found and fixed a few bugs in Migration along the way that were revealed while integrating the new DSCreate code. Platforms tested: RHEL4, FC6 Flag Day: Yes. New instance creation code and autotool changes. Doc impact: no
* Resolves: bug 245815Rich Megginson2007-07-128-190/+517
| | | | | | | | | | | | | | Bug Description: DS Admin Migration framework - cross platform support Reviewed by: nhosoi (Thanks!) Fix Description: There are basically three parts to cross platform support 1) Allow a different physical server root than the logical server root. This allows you to copy the old server root directory to the target machine, either by making a tarball or by a network mount. Then you can migrate from e.g. /mnt/opt/fedora-ds, and specify that the real old server root was /opt/fedora-ds. This is the distinction between the --oldsroot and --actualsroot parameters. 2) Cross platform database migration requires the old data is converted to LDIF first. Migration makes the simplifying assumption that the database LDIF file is in the old db directory and has the name of <old backend name>.ldif e.g. userRoot.ldif 3) Cross platform replication migration doesn't preserve the state, so the changelog nor other associated state information can be migrated. I rewrote the old migration script to use the FileConn - this theoretically will allow us to support migration using an LDAP::Conn as well. I had to make some fixes to FileConn, primarily to support the root DSE. Platforms tested: RHEL4 Flag Day: no Doc impact: Yes, along with the rest of the new migration framework.
* Resolves: #247725Noriko Hosoi2007-07-111-1/+1
| | | | | | | Summary: rhds71 Invalid LDIF Syntax crashes directory server (comment #18) Description: The problem was if an RDN ends with '\\', strcpy_special_undo did not check if there is no more character, and incremented the pointer beyond the end and accessed the address.